You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
Authorization code flow <AUTHORIZATION_CODE> expiration of offline token access type
Hi!
I want to get long live connection from an application to Dropbox App folder.
The recommended OAuth authorization in that case is authorization code flow with offline token access type.
After initial authorization application get <AUTHORIZATION_CODE>, <ACCESS_TOKEN> and <REFRESH_TOKEN>.
Is the <AUTHORIZATION_CODE>/<REFRESH_TOKEN> expires and how long for *offline* token access type?
Whether using "offline" access or not, "authorization codes" can each only be used once, and are only valid for a short period of time. Apps should use authorization codes once immediately upon receiving them.
"Refresh tokens" do not expire by default, and can be stored and re-used repeatedly for further API calls without the user present. Refresh tokens can be revoked on demand though.
- Greg-DB
Dropbox Staff
Whether using "offline" access or not, "authorization codes" can each only be used once, and are only valid for a short period of time. Apps should use authorization codes once immediately upon receiving them.
"Refresh tokens" do not expire by default, and can be stored and re-used repeatedly for further API calls without the user present. Refresh tokens can be revoked on demand though.
About Discuss Dropbox Developer & API
Make connections with other developers
